Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JhCRkl9oPbkSwyo5Xh68Zq7ngx0.roa
File: JhCRkl9oPbkSwyo5Xh68Zq7ngx0.roa (raw, json)
Hash identifier: 0ZKcQTSaaEb9iuGw7yBhOYkp0mUlA08NPiGN3OJFtQM=
Subject key identifier: 26:10:91:92:5F:68:3D:B9:12:C3:2A:39:5E:1E:BC:66:AE:E7:83:1D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018593A6842933BFA6BA494AC86498C0D2CA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JhCRkl9oPbkSwyo5Xh68Zq7ngx0.roa
Signing time: Sun 08 Jan 2023 23:10:41 +0000
ROA not before: Sun 08 Jan 2023 23:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:93:a6:84:29:33:bf:a6:ba:49:4a:c8:64:98:c0:d2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 8 23:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=261091925f683db912c32a395e1ebc66aee7831d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:e5:9e:35:fe:24:71:d8:0a:d1:48:74:32:
b2:17:54:bb:d1:2d:52:0c:a3:86:d7:0a:49:15:ee:
00:6c:cd:59:76:5f:b0:c9:11:62:f8:84:98:48:ac:
64:19:3c:0e:52:69:9e:ca:ad:42:a3:9b:8a:25:19:
51:85:e0:89:34:56:4c:4e:15:bb:c0:6d:c2:3c:c8:
03:02:93:ac:14:5f:ff:e6:87:b3:15:a9:09:f7:1b:
3f:f5:96:f1:77:9f:82:0d:b2:27:05:95:d2:a1:a5:
33:4f:5b:74:11:c7:d7:98:f9:2d:a5:b8:ee:14:51:
1e:ef:08:dc:02:ef:53:7c:02:82:85:b1:64:33:54:
1b:fa:9c:f9:70:21:01:a8:92:96:41:65:60:c8:ee:
a8:66:ac:ee:ca:2a:62:d2:06:30:73:2c:6b:33:15:
ee:9f:12:cb:d9:ae:e6:75:db:82:b5:4d:e5:81:58:
2b:31:59:7d:06:da:d4:ce:30:60:b8:f1:a1:26:92:
f7:aa:aa:82:ec:72:c2:23:be:96:9d:e1:1c:d8:1c:
02:8c:31:41:15:73:55:5c:c6:71:4d:39:e4:65:38:
84:e2:f3:43:61:dc:d6:b7:7e:06:46:8f:65:85:32:
26:9d:ca:f2:5d:97:8b:70:91:bb:35:a3:75:74:a2:
19:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:10:91:92:5F:68:3D:B9:12:C3:2A:39:5E:1E:BC:66:AE:E7:83:1D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JhCRkl9oPbkSwyo5Xh68Zq7ngx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:16:01:0f:df:b2:26:8e:68:f7:f0:90:a8:ea:e2:68:d0:12:
c1:5e:01:f3:32:b5:cb:80:c9:1e:ec:9f:66:05:1d:c7:11:ce:
3c:30:82:b2:29:52:5a:08:de:70:f6:37:7f:a3:b5:7e:ea:dd:
90:c0:7b:ed:14:29:56:f4:03:65:0a:47:cf:30:97:0f:fe:a7:
cf:d7:8a:77:7a:67:42:a7:d8:20:29:21:55:57:ae:a1:57:1b:
8d:bd:83:23:55:18:53:b6:d0:88:87:0f:59:93:93:63:7d:18:
b0:9c:5d:2d:4e:a1:df:47:a9:df:02:cf:07:19:b0:64:6f:f3:
f2:ec:f1:ff:97:94:d3:9b:49:bd:42:25:5e:65:ee:c7:c1:9c:
77:f2:8f:14:45:41:40:f3:ac:86:bf:01:4d:5f:58:61:d3:55:
8d:bb:bd:36:d6:ff:2e:c1:7b:86:78:d0:b7:ad:97:3f:6a:1e:
52:36:ea:44:39:90:9a:d8:6a:96:82:5b:cd:3c:c2:0e:e3:40:
38:b3:ec:49:15:f8:46:fd:d0:8e:a0:65:92:f4:11:e4:31:0c:
ad:3e:a8:e8:03:09:92:ea:50:cd:9e:2d:0d:f6:e6:4b:39:c4:
33:6d:1c:69:5d:00:58:89:44:d4:13:a5:60:d6:60:5b:94:23:
ee:5c:69:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:32:30 2025 by rpki-client